Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/9C09360E0C3411EDB8619843C4F9AE02.roa
File:                     9C09360E0C3411EDB8619843C4F9AE02.roa (raw, json)
Hash identifier:          iYMv0Y2btiNQDsASykiNYZLlnHo5rRZ4eb3rA88k1B0=
Subject key identifier:   60:C7:6B:76:35:30:C3:3E:37:3A:CE:50:5B:53:9E:27:A5:58:7B:E1
Certificate issuer:       /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial:       048B
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/9C09360E0C3411EDB8619843C4F9AE02.roa
Signing time:             Sat 05 Oct 2024 00:34:48 +0000
ROA not before:           Sat 05 Oct 2024 00:34:48 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     47856
IP address blocks:        103.81.129.0/24 maxlen: 24
                          124.109.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
        Validity
            Not Before: Oct  5 00:34:48 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670089a8-ddc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:5b:92:40:50:79:9d:5d:9c:ce:02:b3:e0:
                    d2:9e:15:ca:b5:8d:0a:d9:d9:d7:a5:6c:d8:f6:ed:
                    9d:6b:62:5b:79:f7:7e:6b:e0:85:0b:63:34:fb:42:
                    c9:af:7a:ba:53:ef:99:30:cc:dc:f3:a4:0e:3e:c3:
                    3c:34:2d:09:d3:05:f7:44:09:c6:ed:02:45:89:71:
                    c0:cd:c2:a9:9f:26:0e:65:6d:be:d6:a1:b5:c5:43:
                    e6:b3:4c:77:b3:17:d0:5e:61:cf:b2:c9:43:06:c6:
                    92:ee:60:66:7e:c7:3e:97:eb:6c:e9:84:3b:43:14:
                    39:b6:4a:f2:cf:c5:20:6b:2d:a7:e0:67:62:13:93:
                    fe:fa:5e:14:f8:08:23:e2:8b:a6:53:e0:c2:9f:6a:
                    28:94:d8:9e:0d:da:8d:09:19:07:cc:e5:d0:0b:1b:
                    ce:e6:14:89:b7:a2:19:38:45:b3:f8:03:f7:bc:d4:
                    d5:f7:31:2d:26:37:a5:dc:50:bd:f7:f8:ff:10:2f:
                    c4:5b:77:e7:c2:22:a3:0a:ae:a8:db:86:2e:00:c5:
                    82:0d:f7:4f:ea:64:4d:45:82:21:5d:40:b1:86:1c:
                    8c:9b:45:0f:35:f4:4f:2e:97:05:0f:b4:bd:c8:3d:
                    4d:e5:de:fb:0a:f3:df:f0:5a:f8:55:23:bf:81:dd:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:6B:76:35:30:C3:3E:37:3A:CE:50:5B:53:9E:27:A5:58:7B:E1
            X509v3 Authority Key Identifier:
                keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/9C09360E0C3411EDB8619843C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.129.0/24
                  124.109.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:30:ee:b0:a1:21:3b:62:a4:a0:6f:4f:be:f2:4c:98:c4:
         95:23:29:e1:e1:f3:ee:ad:5d:5c:a7:eb:ff:60:7b:3b:2e:61:
         d1:19:83:b0:59:f8:aa:fb:8f:44:16:36:a3:e8:12:46:5e:8d:
         0a:8b:05:bb:1c:97:7e:79:85:c4:85:8f:74:5d:0a:5b:18:cb:
         8d:be:4b:7f:9b:3a:df:ae:64:ac:37:29:ed:c8:b7:7c:1a:fc:
         37:30:09:42:1c:c7:80:df:6a:a7:a0:4c:cd:7c:0f:20:88:74:
         a4:48:bc:98:4c:16:a4:13:52:0a:a9:62:04:c3:37:2f:77:11:
         42:80:6b:e3:3a:d5:ba:d9:06:61:b8:1f:54:b4:f0:26:2d:03:
         11:b3:47:52:4d:0b:6c:63:32:77:55:0c:6f:63:9a:cc:7c:62:
         d3:4d:e5:18:ac:65:eb:ab:2b:a7:b6:7f:21:2d:9a:69:8c:be:
         bb:72:e9:a9:29:29:d3:34:4e:0a:47:ca:68:dd:65:4e:ac:fb:
         8b:c5:d4:57:75:c9:ba:c6:8d:06:a9:50:ba:c1:ec:ea:d0:a4:
         64:83:fb:a7:ea:dc:6a:e9:d7:5c:a8:b6:9e:34:90:fc:c7:e4:
         42:e2:a9:6f:ec:10:3f:ad:be:a5:b2:39:f1:7d:b7:cb:c0:be:
         44:77:6b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org